Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa
File:                     40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json)
Hash identifier:          SO3eBhX6z6DZmQ0BdQxFlFH7IRsSItCqMCpBmBfAeVg=
Subject key identifier:   89:A9:1D:27:4A:8D:79:61:DB:20:5A:32:CF:69:3D:1C:BA:52:FA:DC
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A497072BE4F12DE050AE042B0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     30103
IP address blocks:        161.199.138.0/23 maxlen: 24
                          198.251.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:72:be:4f:12:de:05:0a:e0:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=92f33876-26b7-41cc-bd43-727f288084eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:3f:35:f1:ff:ff:b1:39:b0:bb:9b:d1:be:
                    3a:28:6b:6d:1b:29:12:d6:ba:2c:b2:e6:01:c8:6c:
                    57:8c:a1:67:e6:41:ca:c5:8a:5c:c3:a7:b6:29:ab:
                    d8:40:5f:6b:51:8b:26:0b:7c:e9:dd:7c:f4:d4:81:
                    dc:ea:f9:ef:e1:c2:6b:46:70:05:a6:32:6e:a9:a6:
                    81:ba:12:7c:1b:c3:2f:aa:ab:9d:cc:52:c5:f1:a4:
                    70:46:d6:5b:8e:60:37:84:bc:c9:e9:74:b7:6a:8b:
                    91:ea:43:ae:2b:e1:d9:95:7f:e2:39:e4:be:eb:da:
                    32:fe:5c:81:18:0d:ce:76:7a:2d:af:22:eb:ee:83:
                    12:45:d2:21:cc:c2:88:e3:c9:1f:6b:0b:71:0d:d3:
                    85:d4:02:63:17:d7:b8:0a:66:b6:49:2f:db:5a:2c:
                    12:dc:d0:68:df:f1:d5:66:5c:d1:30:83:72:e3:ef:
                    50:7c:2b:49:eb:0e:82:ab:56:05:8b:20:9e:14:5e:
                    5a:57:4e:30:87:3d:21:5b:8f:08:76:98:76:3d:27:
                    9e:20:a5:db:9e:52:a0:81:04:15:e7:1d:47:60:95:
                    bc:5a:df:e3:1f:03:35:04:3b:e5:d5:18:80:56:38:
                    64:90:d0:54:21:d2:6b:a5:d2:9d:59:06:b0:59:b6:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:1D:27:4A:8D:79:61:DB:20:5A:32:CF:69:3D:1C:BA:52:FA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.138.0/23
                  198.251.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:63:8a:20:40:90:f6:6e:c3:5f:b9:ca:8b:a4:92:1a:7b:
         69:4c:ee:be:21:70:fb:9f:0d:3a:6c:f9:66:99:6b:30:c3:c9:
         b5:54:fd:05:cb:e0:58:8b:b1:59:cf:7f:ca:2a:77:2b:fb:c4:
         46:4b:44:c2:15:d3:af:18:67:a0:8c:0e:5d:f6:97:9f:04:15:
         c7:61:1f:2f:bd:be:77:46:f1:cf:c9:14:8a:68:d0:96:77:af:
         8e:5d:f5:fa:9c:aa:6c:2f:9b:eb:38:90:68:8e:a3:45:4b:6a:
         24:b8:07:26:36:a8:d0:a5:34:48:a1:c3:86:df:58:0a:c4:fe:
         26:09:d7:2c:16:35:2f:1a:2a:dd:8a:e9:16:81:d0:22:06:60:
         5f:59:8f:b2:75:d3:cc:9c:49:11:f0:ad:7e:b1:4a:94:aa:26:
         6b:9f:2e:10:b7:f2:cc:3e:5f:af:74:61:83:0b:e8:1b:5a:6c:
         2d:0a:b9:69:a8:56:9e:b1:fd:72:9e:9a:d7:5a:8b:c4:93:3f:
         82:95:82:89:f8:03:79:d7:20:51:90:56:b6:bf:ef:5c:3a:80:
         0d:9f:7b:5e:29:66:b8:19:97:ed:16:9d:ff:dc:bb:9f:00:e1:
         4c:65:e3:08:0d:81:a2:1d:72:4e:fe:b9:e5:2a:b4:e2:f2:1d:
         07:ed:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:21:13 2025 by rpki-client